Product:
Microsoft Office
Summary
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw without requiring any privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-54910 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By crafting a malicious document and convincing the user to open it, the attacker can trigger the buffer overflow, leading to arbitrary code execution. This can be done through various means, such as phishing or social engineering tactics.
Affected Products
- Microsoft Office: Affected by a heap-based buffer overflow that allows unauthorized code execution.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office and apply any available security updates. Additionally, users should be cautious when opening documents from untrusted sources and consider implementing security measures such as antivirus software.